Cybersecurity in connected healthcare: balancing risk and progress

The digital transformation of healthcare is expanding rapidly, driven by telemedicine, remote monitoring, and connected medical devices. However, this progress comes with new cybersecurity challenges. “Building secure devices and leaving them alone is outdated,” warns Prof. Stephen Gilbert from the Dresden University of Technology (DUT). “We need real-time oversight and continuous interaction across systems to monitor and manage threats.”

The need for a new approach became clear after the 2020 ransomware attack on Düsseldorf University Hospital, which disrupted emergency care and tragically led to a patient’s death. According to the European Union Agency for Cybersecurity (ENISA), such incidents are becoming more frequent: between 2021 and 2023, 53% of all cyber incidents in healthcare targeted providers, with 42% specifically aimed at hospitals.

From smart infusion pumps to cloud-based health records, connected technologies increase efficiency but also expand potential entry points for hackers. “Data breaches and leaks are among the top risks in remote care, which relies on continuous connectivity between patients and providers. Sensitive medical information is exchanged, and if even one party isn’t in a secure environment, it puts both sides—and the data—at risk,” says Maria Papaphilippou, cybersecurity officer at ENISA.

Remote care models, often based on patients using home Wi-Fi or personal smartphones, introduce vulnerabilities outside hospital-controlled environments. The ‘hospital at home’ model creates a new cybersecurity challenge.

The CYMEDSEC project, coordinated by Gilbert, aims to move beyond isolated, device-level risk assessments toward a system-wide cybersecurity strategy. This includes:

• Real-time monitoring tools for device and network activity
• “Safer-by-design” development principles for manufacturers
• Improved coordination between device suppliers, hospitals, and care providers
• Training and awareness programs for healthcare professionals and patients

Experts agree that awareness remains a major weak point. “If we’re not conscious of the threats, we won’t invest in reducing the risks,” stresses Papaphilippou. Francesco Ricciardi, engineer at Casa Sollievo della Sofferenza, emphasizes user responsibility: “Many people may feel that it doesn’t concern them, but cybersecurity is just as essential as road or workplace safety. It is everyone’s responsibility.”

MEDICA-tradefair.com; Source: CYMEDSEC